CVE-2026-98444
xfs: drop dquot flush lock when we can't find a buffer to flush
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.13, 7.2.9
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: xfs: drop dquot flush lock when we can't find a buffer to flush LOLLM noticed that xfs_qm_flush_one fails to drop the dquot flush lock if it can't grab the buffer associated with the dquot. Since there's no buffer, nobody else is going to drop the dqflock, so we need to do it ourselves.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From ca378189fdfa890a4f0622f85ee41b710bbac271 · fixed in 41bc624377f08125eae164c62ce043791ade93b7; From ca378189fdfa890a4f0622f85ee41b710bbac271 · fixed in ffb48dccce1960a9ea24463a2f3c21d124d6b672; From 6.12.14 · fixed in 6.13
- Linux Linux
6.13
- KernelLinux
From 6.13.0 · fixed in 7.2.9